Cliend_id exposed

The limits are per ID per IP. You should be fine.